[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE8MQDz9oOSAqthdNPoEuPneh-ygYahHRucIfdjS6H6A":3},{"article":4,"iocs":45},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":32},"6a3e4b51-0ce5-4cc8-af0b-6d1eca48c3bd","New ‘Knight Office’ Phishing Kit Steals Microsoft 365 Logins Without Touching a Password","new-knight-office-phishing-kit-steals-microsoft-365-logins-without-touching-a-pa-fc03f4","A newly identified phishing-as-a-service kit is being used to hijack Microsoft 365 accounts by stealing victims’ active login sessions rather than their passwords, according to new research from cybersecurity firm Huntress, a technique that allows attackers to walk straight past multi-factor authentication (MFA) without ever needing to guess, crack, or bypass it. The kit, dubbed “Knight […] The post New ‘Knight Office’ Phishing Kit Steals Microsoft 365 Logins Without Touching a Password appeared first on IT Security Guru.","A new phishing-as-a-service kit, named 'Knight Office,' has been discovered that targets Microsoft 365 accounts. Instead of stealing passwords, it hijacks active login sessions, effectively bypassing multi-factor authentication (MFA). This technique allows attackers to gain access to accounts without needing to compromise credentials directly.","New 'Knight Office' phishing kit steals Microsoft 365 sessions to bypass MFA.",null,"https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F02\u002Fnew-knight-office-phishing-kit-steals-microsoft-365-logins-without-touching-a-password\u002F?utm_source=rss&utm_medium=rss&utm_campaign=new-knight-office-phishing-kit-steals-microsoft-365-logins-without-touching-a-password","2026-09-02T12:59:18+00:00","2026-09-02T18:00:21.857496+00:00",8,[17,20,23,25],{"name":18,"type":19},"Microsoft 365","product",{"name":21,"type":22},"MFA","technology",{"name":24,"type":19},"Knight Office",{"name":26,"type":27},"Huntress","vendor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":28,"icon":11,"name":30,"slug":31},"Malware","malware",[33,38,40],{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":39},{"id":28,"icon":11,"name":30,"slug":31},{"category":41},{"id":42,"icon":11,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]